RHSA-2024:1924: Moderate: Migration Toolkit for Runtimes security, bug fix and enhancement update

Published Apr 18, 2024

Updated

Migration Toolkit for Runtimes 1.2.5 ZIP artifactsSecurity Fix(es): commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file (CVE-2024-25710) For more details about the security issue(s), including the impact, a CVSSscore, acknowledgments, and other related information, refer to the CVE page(s)listed in the References section.

Other sources

Moderate: Migration Toolkit for Runtimes security, bug fix and enhancement update

— Red Hat

Affected Software

1 affected component

Red Hat Red Hat Migration Toolkit for Runtimes

Remediation

Event History

Apr 18, 2024

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Advisory Published

via Red Hat·11:11 AM

Frequently Asked Questions

What is the severity of RHSA-2024:1924?

The severity of RHSA-2024:1924 is determined by the CVSS score associated with the vulnerability, which is not explicitly mentioned in the details provided.

How do I fix RHSA-2024:1924?

To fix RHSA-2024:1924, users should update the Red Hat Migration Toolkit for Runtimes to the latest version that addresses the vulnerability.

What is the vulnerability in RHSA-2024:1924?

The vulnerability in RHSA-2024:1924 is a denial of service issue caused by an infinite loop when processing a corrupted DUMP file due to commons-compress (CVE-2024-25710).

What affected software does RHSA-2024:1924 impact?

RHSA-2024:1924 impacts the Red Hat Migration Toolkit for Runtimes version 1.2.5.

What is CVE-2024-25710 related to RHSA-2024:1924?

CVE-2024-25710 is the identifier for the vulnerability that leads to a denial of service condition in the Red Hat Migration Toolkit for Runtimes.